Security, data protection and compliance.

Infrastructure

The application tier runs in Frankfurt (DigitalOcean App Platform) and the data platform in Ireland (Supabase, eu-west-1). Traffic is encrypted in transit (HTTPS/WSS) and the managed data platform encrypts data at rest. Application containers are ephemeral and persist no customer data.

Access and authentication

Production administration is limited to two named engineers, with MFA enforced across the infrastructure organisations. Tenant isolation combines server-side logic, database Row Level Security, private storage policies and automated tests verifying that one tenant is denied access to another's data.

Backup and recovery

The production database has point-in-time recovery with a seven-day window. An important limitation is disclosed under “What we don't publish yet”.

Incident handling

Affected customers are notified as soon as reasonably possible after material impact is identified, subject to stricter contractual or legal requirements.

Lucy Frontline's AI features are bounded tools — task analysis, import extraction, avatars and translation. They do not evaluate employee work performance, never grant permissions and make no decisions about employees.

Employee-import output is always human-reviewed, and the prompt contract prohibits invented contact details, roles and permissions. Execution logs record provider, model, feature and outcome — never raw prompt content or raw model responses.

Today's provider endpoints (OpenAI, Google Translation) are global — we do not claim EU-only processing. OpenAI does not use API data for training by default; abuse monitoring may retain content up to 30 days. EU endpoints are planned, as is an open-model option on Swedish infrastructure for customers with such requirements. Providers may change within the contracted processing region; changing the contracted region requires your agreement.

Lucy Frontline's sub-processors: Supabase (data platform, Ireland) · DigitalOcean (application hosting, Frankfurt) · OpenAI (AI features, global endpoint) · Google Cloud (translation) · Sentry (error monitoring, ingested in Germany) · 46elks (SMS, Sweden) · Resend (email — note the provider stores account data and metadata in the US). A DPA is available; the sub-processor schedule is being updated for Lucy Frontline and is provided on request.